[CXF-7864] STS: Expires lifetime is ignored if no lifetime created was specified

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.2.6
• Fix Version/s: 3.2.7
• Component/s: STS
• Estimated Complexity: Unknown
• Assignee: Colm O hEigeartaigh
• Reporter: Thomas Papke
• Created: 05/Oct/18 07:21
• Updated: 30/Oct/18 10:05
• Resolved: 05/Oct/18 16:09

Description

WS-trust define that a `/wst:RequestSecurityToken/wst:Lifetime` can be specified with only having `wsu:Expires`. In that case the creationTime shall be set to the current time. CXF simply ignore the lifetime if either expires or created is not present. (The same also for the other direction - lifetime can be also specified without expires, which is ignored as well)

Issue Links

• links to: GitHub Pull Request #455